Personal Data Processing and Cookies Policy

1. Introductory Provisions

This document outlines the principles of personal data processing and cookie usage by Hills Legal, Company ID No.: 22399411, with its registered office at Vinohradská 29/93, Vinohrady (Prague 2), 120 00 Prague (hereinafter referred to as the “Controller”), email: urbanova@hillsadvisory.cz, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and other applicable legislation.

2. What Personal Data We Process

We primarily process the following categories of personal data:

- Identification data (name, surname, company ID, VAT number)

- Contact data (email, phone number, address)

- Billing and payment information

- Data related to the provision of legal and tax services

- Communication data (e.g., email correspondence)

3. Purposes and Legal Grounds for Processing

We process your personal data only to the necessary extent and for the following purposes:

- Fulfilling contracts and pre-contractual communication

- Complying with legal obligations (e.g., tax and accounting regulations)

- Legitimate interest of the Controller (e.g., protection of legal claims)

- Based on consent (e.g., for sending newsletters)

If processing is based on your consent, you have the right to withdraw it at any time.

4. Retention Period of Personal Data

We retain personal data only for as long as necessary to fulfil the above-mentioned purposes or as required by law. Typically:

- For the duration of the contractual relationship and for 10 years thereafter

- Data processed based on consent is stored until the consent is withdrawn

5. Recipients of Personal Data

Your personal data may be shared with the following categories of recipients:

- External providers of IT and accounting services

- External advisors and auditors

- Public authorities, where required by law

The Controller does not process special categories of personal data (e.g., health information).

6. Data Security

We have implemented appropriate technical and organizational measures to secure personal data against loss, misuse, or unauthorized access.

7. Data Transfers Outside the EU

We do not transfer personal data to third countries outside the European Union unless there is an appropriate legal framework in place.

8. Your Rights

You have the right to:

- Access your personal data

- Request rectification or erasure

- Restrict processing

- Data portability

- Object to processing

- Lodge a complaint with a supervisory authority – the Office for Personal Data Protection (www.uoou.cz)

9. Use of Cookies

Our website uses cookies to ensure functionality, analyze traffic, and improve our services. We only use cookies based on legitimate interest or your consent (e.g., for marketing purposes). You can set your browser to block cookies or notify you when they are being used. We use only basic analytics cookies (e.g., Google Analytics) if you give your consent.

10. Contact

If you have any questions regarding the processing of personal data, you can contact us at: urbanova@hillsadvisory.cz